Merge pull request from GHSA-vjph-r677-6pcc

Cacti · Apr 7, 2024 · 52a5b6b · 52a5b6b
1 parent 28bb620
commit 52a5b6b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/api_automation.php b/lib/api_automation.php
@@ -1566,7 +1566,7 @@ function build_graph_object_sql_having($rule, $filter) {
 			$i = 0;
 
 			foreach($field_names as $column) {
-				$sql_having .= ($i == 0 ? '':' OR ') . '`' . implode('`.`', explode('.', $column['field_name'])) . '`' . ' LIKE "%' . $filter . '%"';
+				$sql_having .= ($i == 0 ? '':' OR ') . '`' . implode('`.`', explode('.', $column['field_name'])) . '`' . ' LIKE ' . db_qstr('%' . $filter . '%');
 				$i++;
 			}